$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/45ab7ed7-1307-36c3-847b-e2b9013c4f8d.roa File: 45ab7ed7-1307-36c3-847b-e2b9013c4f8d.roa (raw, json) Hash identifier: +9+ei3GYNNnzXRFISFc8yyxxxZzSW4xR+JvWpGUIF9c= Subject key identifier: A7:ED:14:1A:03:30:3D:6E:61:59:FF:07:B5:1E:20:C8:0A:57:D7:B1 Certificate issuer: /CN=1ccfe266-0609-49cd-b2ba-671a64efdc7c Certificate serial: 010D0C9F4328584AF0F134ACC0BC5A573A3566C0 Authority key identifier: D2:F9:69:B3:D5:80:E9:D5:A6:9F:39:9B:27:89:E8:E2:73:69:11:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/45ab7ed7-1307-36c3-847b-e2b9013c4f8d.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 32787 IP address blocks: 192.169.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:34:ac:c0:bc:5a:57:3a:35:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ccfe266-0609-49cd-b2ba-671a64efdc7c Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=9bc6e936-cc15-4853-9b7c-45395a0e7b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:73:33:05:b1:0f:85:f1:28:9a:23:2a:d3:7b: a8:ba:72:ef:3a:b9:62:e9:f4:35:69:15:00:f9:9a: 8f:b8:a0:25:20:2c:74:41:f6:8c:1f:fd:19:1a:44: 6c:a3:46:1b:de:ad:c6:d3:90:57:fd:23:83:0f:59: af:cb:b7:a7:8c:df:b5:5f:24:ca:80:3c:69:b8:7e: a2:78:d9:7b:20:c9:84:14:67:24:3b:4a:4d:a7:01: c7:20:8b:45:d8:e9:4d:4e:fa:80:86:0d:ca:85:56: 9a:ca:4d:18:9e:38:b6:a6:83:df:53:ae:22:a3:3f: e9:a4:43:3c:71:ab:50:19:da:77:78:77:99:5d:72: 71:31:76:9d:1c:4c:a5:45:e3:26:6f:5a:05:6a:42: f0:c1:06:a7:3b:5c:cc:72:45:9f:bc:fa:19:ad:8f: 28:4d:8f:20:63:47:83:ca:30:84:d5:96:e6:bd:6d: 2d:80:9c:df:07:b5:cc:76:04:5f:f5:2d:27:63:72: 51:a1:4b:16:49:14:d8:a6:f5:b2:06:12:92:6f:7b: 5f:cb:68:97:86:c7:96:8f:fd:c4:e1:03:f6:e0:28: bc:ab:9c:fc:d0:4f:b6:20:3c:6e:70:94:67:18:30: c5:22:90:43:d9:3e:53:4b:b9:b6:17:1f:21:d7:aa: 14:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:ED:14:1A:03:30:3D:6E:61:59:FF:07:B5:1E:20:C8:0A:57:D7:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/45ab7ed7-1307-36c3-847b-e2b9013c4f8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.crl X509v3 Authority Key Identifier: keyid:D2:F9:69:B3:D5:80:E9:D5:A6:9F:39:9B:27:89:E8:E2:73:69:11:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer sbgp-ipAddrBlock: critical IPv4: 192.169.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:3c:e1:18:db:40:7e:65:97:5e:7e:ea:8e:51:79:fd:69:cd: 50:bf:2d:d1:13:8e:8a:db:82:cb:01:58:8c:d6:74:b0:30:7c: 5f:bf:4a:ee:bb:2d:5c:b5:42:13:89:f5:5f:46:96:eb:a2:17: f7:ce:7b:8d:02:27:75:c5:45:ff:16:46:92:ee:a7:bd:11:53: 38:44:a4:82:1a:31:a6:6b:7a:b0:18:17:a3:77:70:df:58:87: e5:0c:47:29:36:8a:cb:10:04:de:a7:43:fa:53:2e:06:62:c2: 14:1c:de:c7:61:fb:9c:be:9a:8f:c0:9f:fb:7f:5a:ed:9a:08: 28:84:1d:92:7d:b3:5d:39:a1:bb:f9:49:5d:27:01:59:6f:4a: 0d:7a:16:2a:7b:65:91:c6:ee:c7:be:66:3a:c4:6f:10:9f:93: f7:3c:11:3a:e5:4f:38:07:dd:f4:42:95:63:a4:25:b8:32:8f: 36:e5:f5:3c:4f:47:38:93:79:29:07:d3:60:58:20:8a:2a:fd: 7e:59:fc:e4:91:97:2a:9e:d6:96:9f:17:85:d7:21:a1:fa:bb: ac:a3:ca:5d:a7:1d:6e:1a:d1:db:25:7f:dd:28:58:c6:87:dc: 0d:44:bd:61:4b:2a:e1:ef:b6:b9:c2:39:fb:cc:a6:57:98:56: 29:75:91:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TSswLxaVzo1ZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNjZmUyNjYtMDYwOS00OWNkLWIyYmEtNjcxYTY0ZWZk YzdjMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk OWJjNmU5MzYtY2MxNS00ODUzLTliN2MtNDUzOTVhMGU3YjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnMzBbEPhfEomiMq03uounLvOrli6fQ1aRUA +ZqPuKAlICx0QfaMH/0ZGkRso0Yb3q3G05BX/SODD1mvy7enjN+1XyTKgDxpuH6i eNl7IMmEFGckO0pNpwHHIItF2OlNTvqAhg3KhVaayk0Ynji2poPfU64ioz/ppEM8 catQGdp3eHeZXXJxMXadHEylReMmb1oFakLwwQanO1zMckWfvPoZrY8oTY8gY0eD yjCE1ZbmvW0tgJzfB7XMdgRf9S0nY3JRoUsWSRTYpvWyBhKSb3tfy2iXhseWj/3E 4QP24Ci8q5z80E+2IDxucJRnGDDFIpBD2T5TS7m2Fx8h16oUQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKftFBoDMD1uYVn/B7UeIMgKV9exMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xY2Nm ZTI2Ni0wNjA5LTQ5Y2QtYjJiYS02NzFhNjRlZmRjN2MvNDVhYjdlZDctMTMwNy0z NmMzLTg0N2ItZTJiOTAxM2M0ZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWNjZmUyNjYtMDYwOS00OWNkLWIy YmEtNjcxYTY0ZWZkYzdjLzFjY2ZlMjY2LTA2MDktNDljZC1iMmJhLTY3MWE2NGVm ZGM3Yy5jcmwwHwYDVR0jBBgwFoAU0vlps9WA6dWmnzmbJ4no4nNpERkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xY2NmZTI2Ni0wNjA5LTQ5Y2QtYjJiYS02NzFh NjRlZmRjN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKkFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAw84RjbQH5ll15+6o5Ref1pzVC/LdETjorbgssBWIzWdLAwfF+/Su67 LVy1QhOJ9V9GluuiF/fOe40CJ3XFRf8WRpLup70RUzhEpIIaMaZrerAYF6N3cN9Y h+UMRyk2issQBN6nQ/pTLgZiwhQc3sdh+5y+mo/An/t/Wu2aCCiEHZJ9s105obv5 SV0nAVlvSg16Fip7ZZHG7se+ZjrEbxCfk/c8ETrlTzgH3fRClWOkJbgyjzbl9TxP RziTeSkH02BYIIoq/X5Z/OSRlyqe1pafF4XXIaH6u6yjyl2nHW4a0dslf90oWMaH 3A1EvWFLKuHvtrnCOfvMpleYVil1kcQ= -----END CERTIFICATE-----Generated at Tue Nov 4 17:19:27 2025 by rpki-client